mirror of
https://git.gay/xqtc/nixos-config
synced 2024-11-22 21:40:31 +01:00
235 lines
6.7 KiB
Nix
235 lines
6.7 KiB
Nix
{
|
||
config,
|
||
lib,
|
||
inputs,
|
||
pkgs,
|
||
...
|
||
}: {
|
||
imports = [
|
||
# Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
../../../common
|
||
../beleth/docker.nix
|
||
#../../antivirus.nix
|
||
../../../modules/home-manager.nix
|
||
inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480
|
||
../../gc.nix
|
||
];
|
||
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
security.pam.services.swaylock = {};
|
||
|
||
hardware.opengl = {
|
||
enable = true;
|
||
driSupport = true;
|
||
driSupport32Bit = true;
|
||
};
|
||
|
||
hardware.bluetooth = {
|
||
enable = true;
|
||
powerOnBoot = true;
|
||
settings = {General = {Enable = "Source,Sink,Media,Socket";};};
|
||
};
|
||
|
||
# Use the systemd-boot EFI boot loader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
|
||
boot.initrd.luks.devices = {
|
||
root = {
|
||
device = "/dev/disk/by-uuid/66cd6602-76c9-42c3-8d06-34b59b39cd55";
|
||
preLVM = true;
|
||
};
|
||
};
|
||
|
||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||
|
||
virtualisation.libvirtd.enable = true;
|
||
programs.virt-manager.enable = true;
|
||
#dconf.settings = {
|
||
# "org/virt-manager/virt-manager/connections" = {
|
||
# autoconnect = ["qemu:///system"];
|
||
# uris = ["qemu:///system"];
|
||
# };
|
||
#};
|
||
|
||
networking.hostName = "lilith"; # Define your hostname.
|
||
# Pick only one of the below networking options.
|
||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||
networking.networkmanager.enable =
|
||
true; # Easiest to use and most distros use this by default.
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "Europe/Berlin";
|
||
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
# console = {
|
||
# font = "Lat2-Terminus16";
|
||
# keyMap = "us";
|
||
# useXkbConfig = true; # use xkb.options in tty.
|
||
# };
|
||
|
||
# Enable the X11 windowing system.
|
||
services.xserver.enable = true;
|
||
# services.xserver.displayManager.gdm.enable = true;
|
||
# services.xserver.displayManager.startx.enable = true;
|
||
# services.xserver.desktopManager.gnome.enable = true;
|
||
services.xserver.desktopManager.plasma6.enable = true;
|
||
#services.xserver.displayManager.defaultSession = "plasmawayland";
|
||
# services.xserver.videoDrivers = ["intel"];
|
||
|
||
services.blueman.enable = true;
|
||
|
||
# Configure keymap in X11
|
||
services.xserver.xkb.layout = "us";
|
||
# services.xserver.xkb.options = "eurosign:e,caps:escape";
|
||
|
||
# Enable CUPS to print documents.
|
||
# services.printing.enable = true;
|
||
|
||
# Enable sound.
|
||
sound.enable = true;
|
||
#hardware.pulseaudio = {
|
||
# enable = true;
|
||
# package = pkgs.pulseaudioFull;
|
||
#};
|
||
hardware.pulseaudio.enable = false;
|
||
security.rtkit.enable = true;
|
||
security.polkit.enable = true;
|
||
services.pipewire = {
|
||
enable = true;
|
||
alsa.enable = true;
|
||
alsa.support32Bit = true;
|
||
pulse.enable = true;
|
||
# If you want to use JACK applications, uncomment this
|
||
jack.enable = true;
|
||
};
|
||
#environment.etc = {
|
||
# "wireplumber/bluetooth.lua.d/51-bluez-config.lua".text = ''
|
||
# bluez_monitor.properties = {
|
||
# ["bluez5.enable-sbc-xq"] = true,
|
||
# ["bluez5.enable-msbc"] = true,
|
||
# ["bluez5.enable-hw-volume"] = true,
|
||
# ["bluez5.headset-roles"] = "[ hsp_hs hsp_ag hfp_hf hfp_ag ]"
|
||
# }
|
||
# '';
|
||
#};
|
||
# Enable touchpad support (enabled default in most desktopManager).
|
||
services.xserver.libinput.enable = true;
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.xqtc = {
|
||
isNormalUser = true;
|
||
extraGroups = ["wheel" "docker" "libvirtd"]; # Enable ‘sudo’ for the user.
|
||
packages = with pkgs; [nushell clamtk];
|
||
shell = pkgs.nushell;
|
||
};
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||
wget
|
||
#git
|
||
neovim
|
||
gcc13
|
||
cargo
|
||
cargo-generate
|
||
sway
|
||
gnome3.adwaita-icon-theme
|
||
glib
|
||
#swaylock
|
||
swaylock-effects
|
||
tofi
|
||
waybar
|
||
wl-clipboard
|
||
wdisplays
|
||
#qemu_full
|
||
gnomeExtensions.blur-my-shell
|
||
#surrealdb
|
||
zathura
|
||
];
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
# programs.mtr.enable = true;
|
||
programs.gnupg.agent = {
|
||
enable = true;
|
||
enableSSHSupport = true;
|
||
};
|
||
services.udev.packages = [pkgs.yubikey-personalization];
|
||
services.pcscd.enable = true;
|
||
|
||
programs.dconf.enable = true;
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Enable the OpenSSH daemon.
|
||
services.openssh.enable = true;
|
||
|
||
services.mysql = {
|
||
enable = true;
|
||
package = pkgs.mariadb;
|
||
};
|
||
|
||
services.mullvad-vpn = {
|
||
enable = true;
|
||
package = pkgs.mullvad-vpn;
|
||
};
|
||
|
||
#networking.nameservers = [
|
||
# #"9.9.9.9#nine.nine.nine.nine"
|
||
# "1.1.1.1#one.one.one.one"
|
||
# "1.0.0.1#one.zero.zero.one"
|
||
#];
|
||
services.resolved = {
|
||
enable = true;
|
||
# #dnssec = "true";
|
||
# domains = [ "~." ];
|
||
# fallbackDns = ["1.1.1.1#one.one.one.one"];
|
||
# #extraConfig = ''
|
||
# # MulticastDNS=yes
|
||
# #'';
|
||
};
|
||
#networking.wireguard.enable = true;
|
||
|
||
services.tailscale.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
networking.firewall.allowedTCPPorts = [22 2234 8080 5173];
|
||
networking.firewall.allowedUDPPorts = [2234];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
# Copy the NixOS configuration file and link it from the resulting system
|
||
# (/run/current-system/configuration.nix). This is useful in case you
|
||
# accidentally delete configuration.nix.
|
||
# system.copySystemConfiguration = true;
|
||
|
||
# This option defines the first version of NixOS you have installed on this particular machine,
|
||
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
||
#
|
||
# Most users should NEVER change this value after the initial install, for any reason,
|
||
# even if you've upgraded your system to a new NixOS release.
|
||
#
|
||
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
||
# so changing it will NOT upgrade your system.
|
||
#
|
||
# This value being lower than the current NixOS release does NOT mean your system is
|
||
# out of date, out of support, or vulnerable.
|
||
#
|
||
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
||
# and migrated your data accordingly.
|
||
#
|
||
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||
system.stateVersion = "23.11"; # Did you read the comment?
|
||
|
||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||
}
|